server:
    prefetch: yes
    harden-glue: yes
    harden-dnssec-stripped: yes
    qname-minimisation: yes
    hide-identity: yes
    hide-version: yes